Clarify comment about the internal separation of read-only and read-write system roles